This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json) Hash identifier: Z0U6slpFzF5te9q867mcg0Wia5Rt+OeEL57Banx9eQw= Subject key identifier: FF:CF:1F:D0:56:AE:3E:C7:7A:73:3D:E3:D6:61:41:37:57:A3:23:9F Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2 Certificate serial: 019B0E936D2A5E7BFFFA89CAFC4D22851E08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft Manifest number: 06CC Signing time: Thu 11 Dec 2025 18:01:41 +0000 Manifest this update: Thu 11 Dec 2025 18:01:41 +0000 Manifest next update: Fri 12 Dec 2025 18:01:41 +0000 Files and hashes: 1: 1-lCQIu3wKSeUq2VrUD5tWenu5SY.roa (hash: uGVhG0epQ2wGofSbe1ShOYtQrordv9iVyPvHij3V4P4=) 2: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: 7arVPsm2v9FnUXISotgXi3QSCJ0gYBbTWJ9jLVsA8vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:6d:2a:5e:7b:ff:fa:89:ca:fc:4d:22:85:1e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2 Validity Not Before: Dec 11 18:01:41 2025 GMT Not After : Dec 12 18:01:41 2025 GMT Subject: CN=ffcf1fd056ae3ec77a733de3d661413757a3239f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:08:7c:6c:2b:46:24:83:c1:5d:18:49:94: c4:7c:f1:48:66:70:ab:1e:91:75:53:f6:3b:5b:00: 2f:87:bc:fe:b6:a0:b5:94:2e:60:84:d0:ea:7e:46: b4:b4:55:dc:45:97:c8:38:22:1f:07:43:e5:10:57: 63:d6:e9:2f:d2:39:e5:40:ea:03:bf:38:35:45:66: 3d:a0:c5:f3:23:67:6f:3f:b3:ae:3a:e7:79:e2:39: 43:39:ed:84:25:8f:ed:fd:df:76:af:2b:64:f9:01: f9:7e:88:79:84:3c:ba:b2:d4:4b:d9:2f:3f:c6:91: 21:c4:45:f5:99:01:57:c2:f2:11:a2:bb:8f:01:81: 5d:e2:e5:cd:19:59:19:3b:c0:f9:fc:40:9a:cf:ac: b8:02:e4:a4:83:0b:b8:07:f9:e6:88:05:5a:17:38: 33:eb:01:0a:59:e3:72:7a:e0:43:0f:dd:33:3f:8e: 4e:e3:7a:ae:a4:26:f2:f1:df:61:c8:ef:90:9a:a8: 53:69:e5:19:e6:66:80:56:61:8c:49:5f:f6:30:01: 59:21:35:60:40:1f:80:da:04:5a:91:3e:19:5f:c7: d8:62:07:da:4b:f2:36:1c:53:55:54:46:eb:f0:7a: 1e:18:68:b0:8c:a2:e8:31:b3:91:4a:30:48:b1:ac: e9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CF:1F:D0:56:AE:3E:C7:7A:73:3D:E3:D6:61:41:37:57:A3:23:9F X509v3 Authority Key Identifier: keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:09:fa:76:fd:77:c9:a1:a1:74:b6:a4:28:ea:66:13:e5:d8: 04:c9:e7:bd:84:16:c0:9a:90:5a:9b:14:cc:54:9c:ba:35:3a: ff:24:df:a3:81:ce:70:21:48:51:a0:a7:c7:cc:2c:58:b4:52: 0a:93:5b:a5:fd:81:8d:93:50:e2:19:21:dc:fe:55:ef:46:77: 1d:c2:b2:6b:28:63:72:47:4b:18:f6:4b:a4:c7:98:e3:6e:ac: 9b:14:1f:b8:af:41:d7:f0:1b:71:d9:88:b8:5d:30:72:17:f1: a9:e6:4c:af:bd:10:6a:6d:e4:2f:c7:26:84:19:dc:c3:ed:a6: fa:c8:d2:bf:95:cf:58:e3:9a:ae:a7:d6:bd:3a:0b:86:eb:44: 34:a4:73:62:42:e4:8f:69:26:26:7e:49:86:bd:86:ad:9d:bd: d6:9d:5e:27:bb:02:e7:f1:8c:92:81:47:e9:22:dd:15:ec:88: b1:4f:28:67:32:68:3a:29:e1:ff:40:ca:ce:c5:d5:51:c3:cd: d1:19:16:9e:5f:14:6e:73:a5:2b:46:f0:5d:99:91:0e:55:e5: 35:18:8c:60:92:0b:a5:cf:58:98:bc:6f:e6:89:ad:ce:2e:4a: c8:eb:b5:c8:84:b8:87:84:fb:42:10:75:8e:57:6a:87:c8:91: c0:3e:aa:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk20qXnv/+onK/E0ihR4IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWVlY2FiOTU3MGNmMGFmZmE4MWJlNzQ4ZTkxMjhmNTVl NDE2YzIwHhcNMjUxMjExMTgwMTQxWhcNMjUxMjEyMTgwMTQxWjAzMTEwLwYDVQQD EyhmZmNmMWZkMDU2YWUzZWM3N2E3MzNkZTNkNjYxNDEzNzU3YTMyMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMYIfGwrRiSDwV0YSZTEfPFIZnCr HpF1U/Y7WwAvh7z+tqC1lC5ghNDqfka0tFXcRZfIOCIfB0PlEFdj1ukv0jnlQOoD vzg1RWY9oMXzI2dvP7OuOud54jlDOe2EJY/t/d92rytk+QH5foh5hDy6stRL2S8/ xpEhxEX1mQFXwvIRoruPAYFd4uXNGVkZO8D5/ECaz6y4AuSkgwu4B/nmiAVaFzgz 6wEKWeNyeuBDD90zP45O43qupCby8d9hyO+QmqhTaeUZ5maAVmGMSV/2MAFZITVg QB+A2gRakT4ZX8fYYgfaS/I2HFNVVEbr8HoeGGiwjKLoMbORSjBIsazpcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/PH9BWrj7HenM949ZhQTdXoyOfMB8GA1UdIwQY MBaAFDRe7KuVcM8K/6gb50jpEo9V5BbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDct ZTcyZmE1NTMxZDQ1LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDctZTcyZmE1NTMxZDQ1 LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAn6dv13 yaGhdLakKOpmE+XYBMnnvYQWwJqQWpsUzFScujU6/yTfo4HOcCFIUaCnx8wsWLRS CpNbpf2BjZNQ4hkh3P5V70Z3HcKyayhjckdLGPZLpMeY426smxQfuK9B1/AbcdmI uF0wchfxqeZMr70Qam3kL8cmhBncw+2m+sjSv5XPWOOarqfWvToLhutENKRzYkLk j2kmJn5Jhr2GrZ291p1eJ7sC5/GMkoFH6SLdFeyIsU8oZzJoOinh/0DKzsXVUcPN 0RkWnl8UbnOlK0bwXZmRDlXlNRiMYJILpc9YmLxv5omtzi5KyOu1yIS4h4T7QhB1 jldqh8iRwD6qvg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:19 2025 by rpki-client